thichallenge.com

Issued by cPanel, Inc. Certification Authority

About this certificate

This digital certificate with serial number 40:cb:eb:a8:02:87:7e:d7:0a:47:6b:92:30:dd:9f:17 was issued on by cPanel, Inc..

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thichallenge.com

cPanel, Inc.

Organization: cPanel, Inc.
State / Province: TX
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:cb:eb:a8:02:87:7e:d7:0a:47:6b:92:30:dd:9f:17
Serial Number (int): 86129407669888120403651847370449985303
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f1:a7:4b:21:87:df:e5:70:bf:c2:da:18:ce:b4:61:12:de:24:9e:bd
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65

Fingerprint (sha1): 64:87:8d:32:73:dd:69:54:bb:a9:60:b2:22:b8:17:01:b2:62:b1:e1
Fingerprint (sha256): fb:4a:ca:41:e6:70:f0:81:7f:e6:20:52:5a:60:9d:11:59:fd:82:17:b9:58:42:c7:20:51:73:1d:25:4b:f0:33

Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl

Check the revocation status for certificate thichallenge.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thichallenge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thichallenge.com
cpanel.thichallenge.com
digitalwellness.ca
eq-wellness.com
firsttwenty.thichallenge.com
firsttwentyperformance.com
firsttwentywellness.com
fithealthyu.thichallenge.com
generalmills.thichallenge.com
livewell.allinahealth.org
mail.digitalwellness.ca
mail.eq-wellness.com
mail.firsttwenty.thichallenge.com
mail.firsttwentyperformance.com
mail.firsttwentywellness.com
mail.fithealthyu.thichallenge.com
mail.generalmills.thichallenge.com
mail.livewell.allinahealth.org
mail.mbs.thichallenge.com
mail.old.healthyuinteractive.com
mail.portal.balanceintegration.com
mail.thichallenge.com
mail.vfp.thichallenge.com
mbs.thichallenge.com
old.healthyuinteractive.com
portal.balanceintegration.com
vfp.thichallenge.com
webdisk.thichallenge.com
webmail.thichallenge.com
www.digitalwellness.ca
www.eq-wellness.com
www.firsttwenty.thichallenge.com
www.firsttwentyperformance.com
www.firsttwentywellness.com
www.fithealthyu.thichallenge.com
www.generalmills.thichallenge.com
www.livewell.allinahealth.org
www.mbs.thichallenge.com
www.old.healthyuinteractive.com
www.portal.balanceintegration.com
www.thichallenge.com
www.vfp.thichallenge.com

Other certificates including the domain name thichallenge.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for thichallenge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA805mxnxa2veezSi+Sd4E
p4RqX9GRcNfy09ZiJRLR8Ko3OJ0l4BKqrJ9icJ4zwCkvff5YuvxkFNHS+q1gRToW
YNkL/pLfiY/aWSBBJQ1qzXOUKptTESl1e5ZiXuM7E+L4MdiKkmh9dWGyFKqG6TtN
89vveZxQJ8Lp5BTuC+z06SGAwjLNUJReUnpKO/Ky5ZLfvQ1y9F33Pxn4Y2tykCKB
57hcle0LfM/Jr44CAVecXTJEfy2SOhyDokG+lxgTdh21EbH6Y/lItuwxv875wLaM
u6aN/akxb2jsKgP7WW6tFglfyTVH5rvYCrHkQr5eSQySSXhheu8x1gycSip4h33u
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86129407669888120403651847370449985303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thichallenge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30714569310634777550862136375948333013068243308434053854824007460241708998016578338706095971244181156629319201695598403791659866055757080529999601395992195895198190307074947740236634221852342883598567799150852145234109861639026001237634768516241179499342330347283193976344408793023242008147562466697490053862316025292214771646189006692327144194710376983087382439249262725534222926894187135225183831543773037083319305735070110912993630907921346943594930776297166375012420006932148534203249872829782522486562134933410664689349866090504495784665708345507803222019612713035198659328748952468382960092262928626992044437153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1a74b2187dfe570bfc2da18ceb46112de249ebd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livewell.allinahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livewell.allinahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.old.healthyuinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.balanceintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vfp.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.healthyuinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.balanceintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfp.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livewell.allinahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.healthyuinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.balanceintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfp.thichallenge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167835108a70000040300473045022027b62f66fd64e33dd8886c1aa0f7749628ea0fb8287806612fb87c9a911e4242022100ff492785105fe44d60d576c2ff62c9d5dc6a9f725e7596af4308e29f7012f6eb007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167835108f50000040300463044022035869d5f07e97eb5d5d43613f30453108215e0dcae6cac917aa0127fa5b41a340220439d33c8ab6c4a9c5aabff38a9a2804c30c4280f037d3bfb68777c070c191c2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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